Can a computer be hacked through a proprietary codec?

Question

Windows

Hello.
Available:
- windows
- proprietary video player
- proprietary video codec
- browser
- video file

Question:

1) if the video codec and video player are created with pre-programmed additional functionality, is it possible to hack a computer through a pre-prepared video file? For example, save the file to your hard drive and run it?
2) Is it possible to hack only through codec + video file? The video player is open source.

3) A similar question with browser-based video playback, for example, through the html5 tag <video>. If the codec is proprietary and we don't know what's in it, is it possible to do the same?

Answer 1

Yes, the codec can contain malware, just like any other software.

Answer 2

Theoretically, yes, especially if the codec asks for admin rights during installation and installs services and drivers.

Answer 3

And what about propriety? It can be done through any program. Though through the calculator) Vulnerability can be anywhere. And the proprietary nature of the software has nothing to do with it.
Even if the codec is open and somewhere on the Internet there are its sorts - are you 100% sure that the codec on your computer is assembled from these sorts and you are 100% sure that it does not contain any vulnerabilities and trojans? )